Skip Navigation >
Apps
  • menu icon Search & Reporting
  • menu icon Cloud Monitoring Console
  • menu icon Heat Map Viz
  • menu icon Splunk App for Windows Infrastructure
  • menu icon Splunk Secure Gateway
  • menu icon Status Indicator
  • menu icon Treemap
  • menu icon Universal Forwarder
  • Manage Apps
  • Find More Apps
Messages
You have no messages.
Delete All
Settings
Add Data

Knowledge

Searches, reports, and alerts
Data models
Event types
Tags
Fields
Lookups
User interface
Alert actions
Advanced search
All configurations

System

Server settings
Health report manager
Workload management

Data

Data inputs
Indexes
Report acceleration summaries
Source types

Distributed environment

Federated search

Users and authentication

Roles
Users
Tokens
Password Management
Authentication Methods
Activity
  • Jobs
  • Triggered Alerts
Tsvetan Tsaykov
  • Preferences
  • Logout
Support & Services
  • Search Splunk
  • Customer Portal
  • Splunk Answers
  • Splunkbase
  • Help for This Page
  • Support & Services
  • Customer Support
  • File a Bug
  • About
  • What's New
Search
Analytics
Datasets
Reports
Alerts
Dashboards
App icon
Search & Reporting
Save As
  • Report
  • Alert
  • Existing Dashboard
  • New Dashboard
  • Event Type
Create Table ViewClose

New Search

index=application-prod operation IN ("PaymentExecuted", "PaymentCreated") earliest>-4m latest<-2m
| transaction paymentExtId startswith=("operation":"PaymentCreated")
| eval provider=mvindex('payment.provider.name',-1)
| eval method=mvindex('payment.method.name',-1)
| eval merchant=mvindex('payment.merchant.name',-1) | eval p="n"
| stats count AS CreatedA, count(eval(operation="PaymentExecuted")) AS ExecutedA by method, provider, merchant
| eval SuccessRatioA=ExecutedA/CreatedA
| append [
search index=application-prod operation IN ("PaymentExecuted", "PaymentCreated") earliest>-2m
| transaction paymentExtId startswith=("operation":"PaymentCreated")
| eval provider=mvindex('payment.provider.name',-1)
| eval method=mvindex('payment.method.name',-1)
| eval merchant=mvindex('payment.merchant.name',-1) | eval p="n"
| stats count AS CreatedB, count(eval(operation="PaymentExecuted")) AS ExecutedB by method, provider, merchant
| eval SuccessRatioB=ExecutedB/CreatedB
]
| where CreatedA<10 AND CreatedB<10
| stats latest(SuccessRatioA) AS SuccessRatioA, latest(SuccessRatioB) AS SuccessRatioB, latest(CreatedA) AS CreatedA, latest(CreatedB) AS CreatedB by method, provider, merchant
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Last 4 minutes
Complete 1,141 events (4/20/21 2:02:24.000 PM to 4/20/21 2:04:24.000 PM)
No Event Sampling
  • No Event Sampling
  • 1 : 10
  • 1 : 100
  • 1 : 1,000
  • 1 : 10,000
  • 1 : 100,000
  • Custom...
Job
  • Your timerange was substituted based on your search string
  • [subsearch]: Your timerange was substituted based on your search string
  • Edit Job Settings...
  • Send Job to Background
  • Inspect Job
  • Delete Job
PauseStop
SharePrintExport
standard_perf (search default)
  • Policy-Based Pool Based on assigned policy
  • high_perf CPU: 60%, Memory: 100%
  • limited_perf CPU: 5%, Memory: 100%
  • standard_perf (search default) CPU: 35%, Memory: 100%
Fast Mode
  • Fast Mode Field discovery off for event searches. No event or field data for stats searches.
  • Smart Mode Field discovery on for event searches. No event or field data for stats searches.
  • Verbose Mode All event & field data.

Search History

You can toggle through past searches in the search bar
Previous: Alt + P
Next: Alt + N
No Time Filter
  • No Time Filter
  • Ran: Today
  • Ran in: Last 7 Days
  • Ran in: Last 30 Days
20 Per Page
  • 10 Per Page
  • 20 Per Page
  • 50 Per Page
Search Actions Last Run
Waiting for results...
No results found.

How to Search

If you are not familiar with the search features, or want to learn more, or see your available data, see one of the following resources.

Documentation Tutorial

Analyze Your Data with Table Views

New!

Table Views let you prepare data without using SPL. First, use a point-and-click interface to select data. Then, clean and transform it for analysis in Analytics Workspace, Search, or Pivot!

Learn moreOpen externally about Table Views, or view and manage your Table Views with the Datasets listing page.

Create Table View
  • Events
  • Patterns
  • Statistics (345)
  • Visualization
Parsing search
Your search isn't generating any statistic or visualization results. Here are some possible ways to get results.

Quick Reports

Click on any field in the events tab for a list of quick reports like 'Top Referrers' and 'Top Referrers by time'.

Search Commands

Use a transforming search command, like timechart or stats, to summarize the data.
50 Per Page
  • 10 Per Page
  • 20 Per Page
  • 50 Per Page
  • 100 Per Page
Statistics Table
Format
Preview
  • Preview
  • No Preview
  • Prev
  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • Next
methodprovidermerchantSuccessRatioASuccessRatioBCreatedACreatedB
methodprovidermerchantSuccessRatioASuccessRatioBCreatedACreatedB
ACHeCheckDepositMazoomaBorgata NJ0.6666666666666666 3 
ACHeCheckDepositMazoomaBorgata-PA 0 1
ACHeCheckDepositMazoomaMGM-Michigan0.33333333333333330.562
ACHeCheckDepositMazoomaMGM-Pennsylvania 0.5 2
ACHeCheckDepositMazoomaMGM-Tennessee0111
ACHeCheckDepositMazoomaMGM-Virgina0 1 
ACHeCheckDepositMazoomaMGMNJ0 2 
AppleCardDepositAppleGala Interactive 0 1
AppleCardDepositAppleLCI LTD0011
AppleCardDepositApplePKR0012
AppleCardDepositAppleTipicoCO0012
AppleECMCDepositCQRUKGala Interactive 1 3
AppleECMCDepositCQRUKTipicoCO1133
AppleMaestroDepositCQRUKPKR1141
AppleVisaDepositCQRUKGala Interactive 1 1
AppleVisaDepositCQRUKLCI LTD1117
AppleVisaDepositCQRUKTipicoCO1131
AstropayCardDepositAstropayPKR 0.6666666666666666 3
AstropayCardDepositAstropaySBCOM1133
AstropayWithdrawalAstropayPKR0.818181818181818211114
AstropayWithdrawalAstropaySBCOM11138
BankTransferRedirectDepositAstropayPKR0064
BankTransferRedirectDepositAstropaySBCOM004237
BankTransferRedirectDepositPINbankPKR0075
BankTransferRedirectDepositPINbankSBCOM008396
BankTransferRedirectWithdrawalTrustlyELECTRAWORKS-EU0 1 
BoletoDepositAstropayPKR0011
BoletoDepositAstropaySBCOM003129
BoletoDepositPINbankPKR 0 1
BoletoDepositPINbankSBCOM003229
DirectBankTransferPaymentDepositInstaDebitPKR1 1 
DirectEBankingDepositPaymentNetworkELECTRAWORKS-EU0.66666666666666660.536
DirectEBankingDepositPaymentNetworkGB_DE00.524
DirectEBankingDepositPaymentNetworkMARTINGALE-EU0012
DirectEBankingDepositPaymentNetworkPP_DE 0.6666666666666666 3
DirectEBankingDepositPaymentNetworkSB_DE1 1 
DirectEBankingDepositPaymentNetworkWESTbahn0 1 
DirectEBankingDepositPaymentNetworkbwin_DE0.40909090909090910.41176470588235292217
DiscoverDepositVantivMGM-Colorado1 2 
DiscoverDepositVantivMGMNJ 1 1
ECMC DepositAIBMSELECTRAWORKS-EU 0 2
ECMC DepositAIBMSEW-ES10.666666666666666613
ECMC DepositAIBMSGala Interactive 1 1
ECMC DepositAIBMSLCI LTD0.91666666666666661125
ECMC DepositAIBMSMARTINGALE-EU0.6666666666666666133
ECMC DepositAIBMSPKR1151
ECMC DepositAIBMSSporting Odds Limited1131
ECMC DepositAIBMSVistabet.gr1 1 
ECMC DepositAIBMSbwin.gr 0.3333333333333333 9
ECMC DepositCQRUKASTONDALE LTD0 1 
Your search isn't generating any statistic or visualization results. Here are some possible ways to get results.

Quick Reports

Click on any field in the events tab for a list of quick reports like 'Top Referrers' and 'Top Referrers by time'.

Search Commands

Use a transforming search command, like timechart or stats, to summarize the data.
Select...
Format
Trellis
No results yet found

Your search did not return any events because you are in Fast Mode.

Search in Verbose Mode to view events.
Show Fields
List
  • Raw
  • List
  • Table
Format
20 Per Page
  • 10 Per Page
  • 20 Per Page
  • 50 Per Page
Hide Fields All Fields
Extract New Fields
Smaller
Larger
Pattern job is starting...
Documentation
Click a pattern for more information.

Your search did not return any patterns because you are in Fast Mode.

Search in Verbose Mode to view patterns.

Disconnected from Splunk server

Your network connection may have been lost or Splunk server may be down.

PrevNext
April 2021
SuMoTuWeThFrSa
    123
45678910
11121314151617
18192021222324
252627282930 
sumCommand Args
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Presets
  • Real-time
  • 30 second window
  • 1 minute window
  • 5 minute window
  • 30 minute window
  • 1 hour window
  • All time (real-time)
  • Relative
  • Today
  • Week to date
  • Business week to date
  • Month to date
  • Year to date
  • Yesterday
  • Previous week
  • Previous business week
  • Previous month
  • Previous year
  •  
  • Last 15 minutes
  • Last 60 minutes
  • Last 4 hours
  • Last 24 hours
  • Last 7 days
  • Last 30 days
  • Other
  • All time
Relative
Minutes Ago
  • Seconds Ago
  • Minutes Ago
  • Hours Ago
  • Days Ago
  • Weeks Ago
  • Months Ago
  • Quarters Ago
  • Years Ago
4/20/21 2:02:24.000 PM
4/20/21 2:06:24.000 PM
Real-time
Minutes Ago
  • Seconds Ago
  • Minutes Ago
  • Hours Ago
  • Days Ago
  • Weeks Ago
  • Months Ago
  • Quarters Ago
  • Years Ago
4/20/21 2:02:24.000 PM
now
Date Range
Between
  • Between
  • Before
  • Since
00:00:00
(up to now)
24:00:00
Date & Time Range
Between
  • Between
  • Before
  • Since
Earliest HH:MM:SS.SSS
(up to now)
Latest HH:MM:SS.SSS
Advanced
4/20/21 1:38:05.000 PM
4/20/21 1:53:05.000 PM
Documentation